CVE-2026-25624EPSS p4.9%

CVE-2026-25624CVE-2026-25624

arista / ng_firewall

Description

An administrative cross-site scripting (XSS) vulnerability exists in the web user interface dashboard layout of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Unvalidated user-supplied variables are echoed back to administrative profiles, facilitating vector payload processing behavior controls.

Scoring

CVSS 5.7 ()
VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L
EPSS0.15% probability of exploitation · percentile 4.9% · 2026-06-19T12:03:05Z
Last modified2026-06-08

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-25623
CVE
CVE-2026-25622
CVE
CVE-2026-25621
CVE
CVE-2026-25620
CVE
CVE-2025-2767
CVE
CVE-2026-0266
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.